@Cl0ck You can always use OLD database, this is not am issue. For disabling TLS for admin console from CLI you can use below method.   1. Determine Cloudera Manager Database cat /etc/cloudera-scm-server/db.properties 2. Make database backup Postgres Backup: ---------------- pg_dump scm > scm_db_.backup 3. Connect to database Postgres Connect: ------------------ psql -U scm -h localhost -p 7432 -d postgres Password for user scm: postgres=> \l postgres=> \c scm 4. Show TLS related rows select * from CONFIGS where attr like '%tls%'; 5. Update TLS for web_tls update CONFIGS set value = 'false' where attr = 'web_tls'; You can generate the key and password as well with same method you did previously. Else please for reference you can use this doc.  https://docs.cloudera.com/documentation/enterprise/5-14-x/topics/how_to_configure_cm_tls.html ... View more

Hi @syedshakir ,   Thanks for your update. Could you please clarify if you are talking about a new issue here? The original issue is not able to access oozie workflow from my documents and got 402 error message. And the latest update you mentioned about users not able to kill jobs.   If the original issue got resolved, please close this thread and I would suggest you opening a new thread to explain what is the new issue and give some error message and screenshots will help.    Thanks, Li     ... View more

@dil4852  Yes, in CDH for many services History and Rollback option is available so for CDSW. Refer the screenshot. You can follow the below link for more details.  https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_mc_revert_configs.html    ... View more

Sure, don't forget to close this thread my accepting this as solution once you done.   Cheers, ... View more

@Mondi The best way to review the Heap requirement guide form Cloudera below: https://docs.cloudera.com/documentation/enterprise/6/release-notes/topics/rg_hardware_requirements.html#concept_vvv_cxt_gbb   The heap tuning can be differ as per the cluster load and the service usages and sometime the only way to choose either reduce the load or add storage. The above guide can you give couple of answers around this question.  ... View more

@GangWar Thanks for your suggestion. All the parameters except the following one were already set in /etc/cloudera-scm-agent/config.ini verify_cert_file Apparently, the only reason why agent wasn't serving requests for logs was because the above flat wasn't set. The moment we configured the flag verify_cert_file and restarted agent, it started serving logs correctly. ... View more

Finally, I figured out what is going on.  The root cause is that, I only set up testuser on edge nodes, not the name node. I looked into this page, https://hadoop.apache.org/docs/r3.1.1/hadoop-project-dist/hadoop-common/GroupsMapping.html, which shows that "For HDFS, the mapping of users to groups is performed on the NameNode. Thus, the host system configuration of the NameNode determines the group mappings for the users."  After I created the user on the NameNode and ran the command hdfs dfsadmin -refreshUserToGroupsMappings the copy is successful and there is no permission-denied error. ... View more